CVE-2021-29706
https://notcve.org/view.php?id=CVE-2021-29706
IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663. IBM AIX versión 7.1, podría permitir a un usuario local no privilegiado explotar una vulnerabilidad en la instalación de rastreo para exponer información confidencial o causar una denegación de servicio. IBM X-Force ID: 200663 • https://exchange.xforce.ibmcloud.com/vulnerabilities/200663 https://www.ibm.com/support/pages/node/6464369 •
CVE-2020-4887
https://notcve.org/view.php?id=CVE-2020-4887
IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911. IBM AIX versiones 7.1, 7.2 y AIX VIOS versión 3.1, podrían permitir a un usuario local explotar una vulnerabilidad en el comando de usuario gencore para crear archivos arbitrarios en cualquier directorio. IBM X-Force ID: 190911 • https://exchange.xforce.ibmcloud.com/vulnerabilities/190911 https://www.ibm.com/support/pages/node/6406022 •
CVE-2020-4829
https://notcve.org/view.php?id=CVE-2020-4829
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960. IBM AIX versiones 7.1, 7.2 y VIOS versión 3.1, podrían permitir a un usuario local explotar una vulnerabilidad en el comando de usuario ksu para obtener privilegios root. ID de IBM X-Force: 189960. • https://exchange.xforce.ibmcloud.com/vulnerabilities/189960 https://www.ibm.com/support/pages/node/6380430 •
CVE-2020-4788 – kernel: speculation on incompletely validated data on IBM Power9
https://notcve.org/view.php?id=CVE-2020-4788
IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296. Los procesadores IBM Power9 (AIX versiones 7.1, 7.2 y VIOS versión 3.1), podrían permitir a un usuario local obtener información confidencial de los datos en la caché L1 en circunstancias atenuantes. IBM X-Force ID: 189296 A flaw was found in the Linux kernel. IBM Power9 processors can speculatively operate on data stored in the L1 cache before it has been completely validated. • http://www.openwall.com/lists/oss-security/2020/11/20/3 http://www.openwall.com/lists/oss-security/2020/11/23/1 https://exchange.xforce.ibmcloud.com/vulnerabilities/189296 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT https://www.ibm.com/support/pages/node/6370729 https://www.oracle.com/security-alerts/cpujul • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2020-4310
https://notcve.org/view.php?id=CVE-2020-4310
IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 177081. IBM MQ y MQ Appliance versiones 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS y versión 9.1 C, son vulnerables a un ataque de denegación de servicio debido a un error en la lógica de Conversión de Datos. ID de IBM X-Force: 177081 • https://exchange.xforce.ibmcloud.com/vulnerabilities/177081 https://www.ibm.com/support/pages/node/6223914 •